808bits

WaveLogic 5 Extreme Encryption Modem

FIPS 140-3 certificate #4913 · Ciena Corporation · data as of 2026-08-28
Active. Sunset date 2026-12-08, 101 days away.
Caveat: Interim validation. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.

Certificate

Certificate number4913
StandardFIPS 140-3
Statusactive
Sunset date2026-12-08
Overall level2
Module typeHardware
EmbodimentMulti-Chip Embedded
VendorCiena Corporation · website
Hardware versions[012 (P/Ns 174-0506-841, 174-0506-842)], [014 (P/N 174-0506-843)], [007 (P/N 174-0506-844)] with components [Mech Kit 500-0506-020 Version 001]
Firmware versions12.3

Module description

The Ciena WaveLogic 5e Encryption Modem with AES-256-GCM, wire-speed optical layer encryption with line rates up to 800G for up to 6.4T of encrypted line capacity.

Security level exceptions

  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3379
AES-CTRA3379
AES-ECBA3305
AES-ECBA3379
AES-GCMA3305
AES-GCMA3379
AES-KWA3379
AES-KWPA3379
Counter DRBGA3379
ECDSA KeyGen (FIPS186-4)A3379
ECDSA KeyVer (FIPS186-4)A3379
ECDSA SigGen (FIPS186-4)A3379
ECDSA SigVer (FIPS186-4)A3379
HMAC-SHA2-256A3379
HMAC-SHA2-384A3379
HMAC-SHA2-512A3379
KAS-ECC Sp800-56Ar3A3379
KAS-ECC-SSC Sp800-56Ar3A3379
KDA TwoStep Sp800-56Cr1A3379
KDF SP800-108A3379
SHA2-256A3379
SHA2-384A3379
SHA2-512A3379
TLS v1.3 KDFA3379

Allowed algorithms

AES (Cert. A3379, key unwrapping. Per IG D.G.; Symmetric key unwrapping)

Tested configurations

  • N/A

Validation history

DateTypeLab
2024-12-09InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-12-09

Source documents